Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/ikMa9MqXV9fTt-fpeOTMdH_rGjk.roa
File: ikMa9MqXV9fTt-fpeOTMdH_rGjk.roa (raw, json)
Hash identifier: IZXIhlBJHXlW68AogpmsrwZKXAwk0TGWgKDJGc8gaFU=
Subject key identifier: 8A:43:1A:F4:CA:97:57:D7:D3:B7:E7:E9:78:E4:CC:74:7F:EB:1A:39
Certificate issuer: /CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Certificate serial: 019F9FBD0AD7338620D5F48822592234EEA1
Authority key identifier: 96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/ikMa9MqXV9fTt-fpeOTMdH_rGjk.roa
Signing time: Sun 26 Jul 2026 18:43:14 +0000
ROA not before: Sun 26 Jul 2026 18:43:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28748
IP address blocks: 37.26.200.0/21 maxlen: 21
134.97.0.0/16 maxlen: 17
134.97.0.0/17 maxlen: 17
185.23.156.0/22 maxlen: 22
192.105.75.0/24 maxlen: 24
193.22.2.0/24 maxlen: 24
195.190.142.0/24 maxlen: 24
2001:650::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:bd:0a:d7:33:86:20:d5:f4:88:22:59:22:34:ee:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Validity
Not Before: Jul 26 18:43:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a431af4ca9757d7d3b7e7e978e4cc747feb1a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:68:38:9d:1f:ac:6c:1d:40:df:9a:9d:57:89:
cc:a1:a8:6b:ae:d4:f7:d9:1c:70:d1:cd:4d:93:07:
f8:ff:49:75:3e:94:06:68:91:2c:11:42:74:74:75:
9b:c3:57:d5:fe:3e:b6:86:45:7a:5e:55:39:e1:62:
82:de:57:30:09:3f:4a:d9:6e:87:d1:1a:67:7e:d4:
75:97:53:3f:32:aa:45:af:23:a0:8d:0f:22:03:57:
3c:73:d5:90:e2:4e:ae:ce:c4:b2:a5:98:e7:de:6e:
7a:6a:73:a0:cc:ed:fa:e7:d1:00:6b:bc:1c:25:7e:
6f:a7:4e:cf:31:ff:83:53:08:5f:3e:3e:85:e2:57:
eb:4f:fd:bc:81:3b:19:18:74:2b:50:51:c4:58:4b:
f7:1c:c1:4e:28:6f:01:b4:9e:c3:f8:69:c4:af:d4:
60:28:cd:10:3f:a6:2d:16:e3:91:22:07:5b:db:a9:
34:ac:74:4d:0c:7d:74:c3:18:61:f9:a4:46:68:c5:
f6:d1:cc:69:41:21:b7:ff:72:f9:92:4e:e0:cf:d9:
7e:7c:33:82:28:52:c1:f0:b0:16:1e:1d:f2:af:9d:
fe:24:ff:51:b3:e9:4c:f6:c3:12:b5:86:f7:5e:86:
7f:50:99:ef:34:d7:2f:28:54:80:21:cf:cd:5b:e8:
b5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:43:1A:F4:CA:97:57:D7:D3:B7:E7:E9:78:E4:CC:74:7F:EB:1A:39
X509v3 Authority Key Identifier:
keyid:96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/ikMa9MqXV9fTt-fpeOTMdH_rGjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.200.0/21
134.97.0.0/16
185.23.156.0/22
192.105.75.0/24
193.22.2.0/24
195.190.142.0/24
IPv6:
2001:650::/29
Signature Algorithm: sha256WithRSAEncryption
b9:8c:21:d4:e0:8e:2b:85:30:be:11:9f:a3:23:e4:e0:77:3f:
fc:e6:83:36:bc:c7:5a:2a:ca:e6:f9:f4:cd:63:84:7c:8a:56:
d7:3e:40:87:99:7b:2b:26:ee:bd:e3:8b:49:e6:06:24:7d:d9:
d9:20:48:42:19:1f:77:17:a7:e0:55:0b:cb:6f:49:c1:c6:2a:
14:ae:bd:6a:0f:1b:0e:97:23:39:01:ec:15:62:da:bb:a2:2c:
eb:32:39:a7:b1:40:4d:07:75:cd:a9:31:20:dc:5c:a5:ae:e2:
b9:c0:ec:34:7a:a5:8a:9c:ca:c3:58:99:c3:1e:d2:c2:12:6c:
5f:4f:f7:71:4b:77:d0:40:65:fc:34:1d:c9:e2:22:ef:09:ab:
16:99:31:9e:1c:c0:4a:5c:1b:8e:3e:45:47:29:03:f2:2a:7f:
a8:15:c4:2e:bc:6a:fd:90:65:f6:f9:47:91:f5:27:30:c8:e2:
ee:f9:81:72:96:73:50:e2:32:b0:7e:48:d8:fb:5d:87:d9:85:
4d:d7:f9:1a:d5:27:2f:00:27:ea:43:48:70:2c:dc:f5:87:af:
ed:ea:cb:02:1b:cd:4e:7b:c1:e1:74:b2:c4:b5:06:c9:df:32:
44:9b:12:89:64:0c:8d:fd:34:a8:15:e4:29:94:2c:12:e2:eb:
c5:fc:98:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:23:39 2026 by rpki-client